Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

wireless control system vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2022-29964

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded credentials. NOTE: this is different from CVE-2014-2350.
Emerson Deltav Distributed Control System Sq Controller FirmwareEmerson Deltav Distributed Control System Sx Controller FirmwareEmerson Se4002s1t2b6 High Side 40-pin Mass I/o Terminal Block FirmwareEmerson Se4003s2b4 16-pin Mass I/o Terminal Block FirmwareEmerson Se4003s2b524-pin Mass I/o Terminal Block FirmwareEmerson Se4017p0 H1 I/o Interface Card And Terminl Block FirmwareEmerson Se4017p1 H1 I/o Card With Integrated Power FirmwareEmerson Se4019p0 Simplex H1 4-port Plus Fieldbus I/o Interface With Terminalblock FirmwareEmerson Se4026 Virtual I/o Module 2 FirmwareEmerson Se4027 Virtual I/o Module 2 FirmwareEmerson Se4032s1t2b8 High Side 40-pin Do Mass I/o Terminal Block FirmwareEmerson Se4037p0 H1 I/o Interface Card And Terminl Block FirmwareEmerson Se4037p1 Redundant H1 I/o Card With Integrated Power And Terminal Block FirmwareEmerson Se4039p0 Redundant H1 4-port Plus Fieldbus I/o Interface With Terminalblock FirmwareEmerson Se4052s1t2b6 High Side 40-pin Mass I/o Terminal Block FirmwareEmerson Se4082s1t2b8 High Side 40-pin Do Mass I/o Terminal Block FirmwareEmerson Se4100 Simplex Ethernet I/o Card (eioc) Assembly FirmwareEmerson Se4101 Simplex Ethernet I/o Card (eioc) Assembly FirmwareEmerson Se4801t0x Redundant Wireless I/o Card FirmwareEmerson Ve4103 Modbus Tcp Interface For Ethernet Connected I/o (eioc) FirmwareEmerson Ve4104 Ethernet/ip Control Tag Integration For Ethernet Connected I/o (eioc) FirmwareEmerson Ve4105 Ethernet/ip Interface For Ethernet Connected I/o (eioc) Firmware
516
VMScore

CVE-2015-7973

NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90, when configured in broadcast mode, allows man-in-the-middle malicious users to conduct replay attacks by sniffing the network.
Ntp Ntp 4.2.8Ntp NtpSiemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 FirmwareFreebsd Freebsd 9.3Freebsd Freebsd 10.2Freebsd Freebsd 10.1Freebsd FreebsdNetapp Oncommand Balance -Netapp Clustered Data Ontap -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04
1000
VMScore

CVE-2008-0960

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x prior to 5.2.4.1, 5.3.x prior to 5.3.2.1, and 5.4.x prior to 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 up to and including 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3R...
Juniper Session And Resource Control 1.0Juniper Session And Resource Control 2.0Juniper Src Pe 1.0Juniper Src Pe 2.0
187
VMScore

CVE-2015-7975

The nextvar function in NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90 does not properly validate the length of its input, which allows an malicious user to cause a denial of service (application crash).
Ntp Ntp 4.3.80Ntp Ntp 4.3.51Ntp Ntp 4.3.17Ntp Ntp 4.3.30Ntp Ntp 4.3.74Ntp Ntp 4.3.67Ntp Ntp 4.3.14Ntp Ntp 4.3.27Ntp Ntp 4.3.13Ntp Ntp 4.3.36Ntp Ntp 4.3.16Ntp Ntp 4.3.35Ntp Ntp 4.3.53Ntp Ntp 4.3.64Ntp Ntp 4.3.20Ntp Ntp 4.3.40Ntp Ntp 4.3.68Ntp Ntp 4.3.46Ntp Ntp 4.3.77Ntp Ntp 4.3.1Ntp Ntp 4.3.6Ntp Ntp 4.3.2
670
VMScore

CVE-2015-6420

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...
Apache Commons CollectionsApache Commons Collections 4.0
828
VMScore

CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote malicious users to execute arbitrary code via long invalid arguments.
Cisco Wvc54gcCisco Wvc54gc 1.15
810
VMScore

CVE-2011-3192

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x up to and including 2.0.64, and 2.2.x up to and including 2.2.19 allows remote malicious users to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as e...
Apache Http ServerSuse Linux Enterprise Server 11Opensuse Opensuse 11.4Opensuse Opensuse 11.3Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Server 10Suse Linux Enterprise Software Development Kit 11Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04
356
VMScore

CVE-2015-7976

The ntpq saveconfig command in NTP 4.1.2, 4.2.x prior to 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows malicious users to cause unspecified impact via a crafted filename.
Ntp Ntp 4.1.2Ntp NtpNtp Ntp 4.3.80Ntp Ntp 4.3.51Ntp Ntp 4.3.17Ntp Ntp 4.3.30Ntp Ntp 4.3.74Ntp Ntp 4.3.67Ntp Ntp 4.3.14Ntp Ntp 4.3.27Ntp Ntp 4.3.13Ntp Ntp 4.3.36Ntp Ntp 4.3.16Ntp Ntp 4.3.35Ntp Ntp 4.3.53Ntp Ntp 4.3.64Ntp Ntp 4.3.20Ntp Ntp 4.3.40Ntp Ntp 4.3.68Ntp Ntp 4.3.46Ntp Ntp 4.3.77Ntp Ntp 4.3.1
739
VMScore

CVE-2019-12505

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target syst...
Inateck Wp1001 Firmware 1.3c
739
VMScore

CVE-2019-12504

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP2002 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is ...
Inateck Wp2002 Firmware -
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29824CVE-2024-30095CVE-2024-30104client sideCVE-2024-5840CVE-2024-34405unprivilegedwirelessCVE-2024-4577
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook